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~ The MAILING DATE of this communication appears on the cover sheet with the correspondence address- 

All claims being allowable, PROSECUTION ON THE MERITS IS (OR REMAINS) CLOSED in this application. If not included 
herewith (or previously mailed), a Notice of Allowance (PTOL-85) or other appropriate communication will be mailed in due course. THIS 
NOTICE OF ALLOWABILITY IS NOT A GRANT OF PATENT RIGHTS. This application is subject to withdrawal from issue at the initiative 
of the Office or upon petition by the applicant. See 37 CFR 1.313 and MPEP 1308. 

1 . This communication is responsive to 28 January 2009 . 

2. The allowed claim(s) is/are 1,3-6,8-13,15-25 and 29 . 

3. □ Acknowledgment is made of a claim for foreign priority under 35 U.S.C. § 119(a)-(d) or (f). 

a) □ All b)DSome* c) □ None of the: 

1. □ Certified copies of the priority documents have been received. 

2. □ Certified copies of the priority documents have been received in Application No. . 

3. □ Copies of the certified copies of the priority documents have been received in this national stage application from the 

International Bureau (PCT Rule 17.2(a)). 
* Certified copies not received: . 

Applicant has THREE MONTHS FROM THE "MAILING DATE" of this communication to file a reply complying with the requirements 
noted below. Failure to timely comply will result in ABANDONMENT of this application. 
THIS THREE-MONTH PERIOD IS NOT EXTENDABLE. 

4. □ A SUBSTITUTE OATH OR DECLARATION must be submitted. Note the attached EXAMINER'S AMENDMENT or NOTICE OF 

INFORMAL PATENT APPLICATION (PTO-152) which gives reason(s) why the oath or declaration is deficient. 

5. □ CORRECTED DRAWINGS ( as "replacement sheets") must be submitted. 

(a) □ including changes required by the Notice of Draftsperson's Patent Drawing Review ( PTO-948) attached 

1 ) □ hereto or 2) □ to Paper No./Mail Date . 

(b) □ including changes required by the attached Examiner's Amendment / Comment or in the Office action of 

Paper No./Mail Date . 

Identifying indicia such as the application number (see 37 CFR 1. 84(c)) should be written on the drawings in the front (not the back) of 
each sheet. Replacement sheet(s) should be labeled as such in the header according to 37 CFR 1.121(d). 

6. □ DEPOSIT OF and/or INFORMATION about the deposit of BIOLOGICAL MATERIAL must be submitted. Note the 

attached Examiner's comment regarding REQUIREMENT FOR THE DEPOSIT OF BIOLOGICAL MATERIAL. 
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DETAILED ACTION 

1 . The Applicant's amendment, filed 28 January 2009, has been received and 
entered into the record, respectfully and carefully considered. 

2. As a result of the amendment, claims 1 , 3-4, 6, 9-1 1 , 1 3, 1 5, 1 8 and 21 are 
amended. Claims 2, 7 and 14 are canceled. Claim 29 is a newly added claim. Claims 
26-28 are withdrawn from consideration since they are non-elected claims in response 
to restriction/election requirement. Therefore, claims 1, 3-6, 8-13 and 15-29 are 
pending in the application. Claims 1 , 3-6, 8-13, 15-25 and 29 have been examined. 

Information Disclosure Statement 

3. The information disclosure statement (IDS) submitted on 28 January 2009 was 
considered by the examiner. 

EXAMINER'S AMENDMENT 

4. An examiner's amendment to the record appears below. Should the changes 
and/or additions be unacceptable to applicant, an amendment may be filed as provided 
by 37 CFR 1 .312. To ensure consideration of such an amendment, it MUST be 
submitted no later than the payment of the issue fee. Authorization for this examiner's 
amendment was given in a telephone interview with Mr. Benjamin A. Kimes 
(Registration No. 50,870) on 24 March 2009 and 26 March 2009. The amendment is to 
cancel non-elected claims and to further clarify the invention. As per MPEP 713.04, a 
separate interview summary form is not provided because the content of the interview 
has been summarized herein. 
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Please note in the below authorized examiner's amendment, "a hardware 
processor" is added to the claims 1 and 13. This newly added claim limitation is 
supported by page 6, paragraph [0012] and fig. 1 of the original disclosure. The 
supporting paragraph and figure disclose "Processor 110 may have... embedded key, 
page table registers and cache memory". To an ordinary skill in the art at the time of 
the invention, a processor has embedded key, page table registers and cache memory 
is a hardware processor. Thus, at least one machine is being recited and the method 
claims 1 , 3-6, 8-12, 25 and 29 are positively tied to a particular machine that 
accomplishes the claimed method steps. Therefore, claims 1, 3-6, 8-12, 25 and 29 are 
statutory. 

Furthermore, in the below authorized examiner's amendment, it removes "and 
electrical, optical, acoustical and other forms of propagated signals (e.g., carrier wave, 
infrared signals, digital signals, etc.); etc" from the instant Specification. Thus, the 
examiner takes the act of deleting as a disavowal. 

The application has been amended as follows: 

IN THE SPECIFICATION: 

> Please delete "and electrical, optical, acoustical and other forms of 
propagated signals (e.g., carrier wave, infrared signals, digital 
signals, etc.); etc" from page 12, paragraph [0031], lines 19-20 
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IN THE CLAIMS: 

> Please cancel Claims 26-28 

> Please replace Claims 1, 4, 13, 15, 16, 18, 19, 21-23 and 25 as below: 
(Claim 1) (Currently Amended) A method comprising: 

executing , by a hardware processor, a protected application in a protected 
execution environment that is provided by a trusted platform, the protected execution 
environment being associated with a protected section of memory that is inaccessible to 
direct memory access and an unprotected section of memory that is accessible to direct 
memory access, wherein the trusted platform includes a trusted path and an untrusted 
path port mapped to tho protoctod sect i on of momorv and on untrusted port moppod to 
th e unprot e ct e d s e ct i on of m e mory ; 

determining, by the hardware processor executing the protected application, that 
information is to be accessed from a subscriber identity module (SIM) device that 
includes a SIM card, the SIM device being physically connected with the trusted 
platform; 

wherein the trusted path is a path between the protected application and the SIM 
device, the trusted path being a path through a trusted port of the trusted platform, 
wherein the trusted port is mapped to the protected section of memory; 

wherein the untrusted path is another path between the protected application and 
the SIM device, the untrusted path being a path through an untrusted port of the trusted 
platform, wherein the untrusted port is mapped to the unprotected section of memory; 
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exchanging unencrypted data that includes an encryption key between the SIM 
device and the protected application via the[[a]] trusted path , tho trusted path bo i ng o 
path through th e trust e d port , wherein the unencrypted data to be exchanged is secured 
from unauthorized access via properties of the trusted port; and 
e ncrypt i ng add i t i ona l data us i ng th e e ncryption k e y; and 

exchanging [[the]] encrypted data that is additional data that has been encrypted 
using the encryption key between the SIM device and the protected application via 
the[[an]] untrusted path , tho untrustod path boing o path through tho untrustod port . 

(Claim 4) (Currently Amended) The method of claim 1 , wherein exchanging the 
encryption key includes the protected application accessing the encryption key from the 
SIM device, the protected application accessing the encryption key via the trusted port. 

(Claim 13) (Currently Amended) A system comprising: 

a syst e m m e mory hav i ng a prot e ct e d s e ction that i s i nacc e ss i b le to d i r e ct m e mory 
accoss, an unprotoctod soct i on that i s accossib l o to d i roct memory access and a 
prot e ct e d m e mory tab le that i d e nt i f ie s th e prot e ct e d s e ct i on and th e unprot e ct e d 

a proc e ssor hav i ng a pr i vat e cach e memory that has prot e ct i ons that pr e v e nt 
accoss to sa i d pr i vate cache memory by unauthor i zed dov i cos, and reg i sters that 
i d e nt i fy m e mory pag e s of th e syst e m m e mory that ar e acc e ss i b le on l y to trust e d cod e ; 
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a l og i c c i rcu i t hav i ng a trust e d port mapp e d to th e prot e ct e d s e ct i on of th e syst e m 
memory and an unprotected port mapped to tho unprotected sect i on of tho system 
m e mory, th e syst e m m e mory, proc e ssor and l og i c c i rcu i t be i ng compon e nts of a 
p l atform that i s conf i gured to prov i de a trusted env i ronment for an app li cat i on; and 

a S I M d e v i c e that i nc l ud e s a S I M card, th e S I M d e v i c e b ei ng phys i ca ll y 
connected w i th tho p l atform, to exchange unencrypted data that i nc l udes an encrypt i on 
k e y w i th an app li cat i on e x e cut e d i n th e trust e d env i ronm e nt v i a th e trusted port, wh e r ei n 
tho unencrypted data to bo exchanged i s secured by tho trusted port from unauthor i zed 
acc e ss, and to e xchang e e ncrypt e d data w i th tho app li cat i on v i a th e unprot e ct e d port. 

a memory having a protected section that is inaccessible to direct memory 
access and an unprotected section that is accessible to direct memory access: 

a trusted platform to provide a protected execution environment, the protected 
execution environment being associated with the protected section of memory and the 
unprotected section of memory, wherein the trusted platform includes a trusted path and 
an untrusted path: and 

a hardware processor to execute a protected application in the protected 
execution environment, wherein the trusted application to: 

determine that information is to be accessed from a subscriber identity 

module (SIM) device that includes a SIM card, the SIM device being physically 

connected with the trusted port: 
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wherein the trusted path is a path between the protected application and 
the SIM device, the trusted path being a path through a trusted port of the trusted 
platform, wherein the trusted port is mapped to the protected section of memory: 

wherein the untrusted path is another path between the protected 
application and the SIM device, the untrusted path being a path through an 
untrusted port of the trusted platform, wherein the untrusted port is mapped to 
the unprotected section of memory; 

exchange, with the SIM device, unencrypted data that includes an 
encryption key via the trusted path, wherein the unencrypted data to be 
exchanged is secured from unauthorized access via properties of the trusted 
port: and 

exchange, with the SIM device, encrypted data that is additional data that 
has been encrypted using the encryption key via the untrusted path. 

(Claim 15) (Currently Amended) The system of claim 13, wherein the exchange of 
the encryption key includes the protected application to transmit the encryption key to 
the protected section of syst e m memory, and the SIM device to access the encryption 
key from the protected section of systom_ memory. 

(Claim 16) (Currently Amended) The system of claim 13, wherein the exchange of the 
encryption key includes the protected application to access the encryption key from the 
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SIM device, the protected application to access the encryption key via the trusted port of 
the trusted platform l og i c c i rcu i t . 



(Claim 18) (Currently Amended) The system of claim 13, wherein the system further 
includes a host controller to transmit data from the SIM device to the unprotected 
section of systom_ memory. 

(Claim 19) (Currently Amended) The system of claim 18, wherein the system further 
includes a driver to transmit data from the unprotected section of memory to the 
protected application. 

(Claim 21) (Currently Amended) The system of claim 13, wherein the SIM device is to 
read the encryption key from the protected section of memory via the trusted port of the 
trusted platform l oq i c c i rcu i t . 

(Claim 22) (Currently Amended) The system of claim 13, wherein the protected 
application is to decrypt the encrypted data using the encryption key. 

(Claim 23) (Currently Amended) The system of claim 13, wherein the protected 
application is to authenticate the SIM device prior to the exchange of the encryption key. 



(Claim 25) (Currently Amended) The method of claim 1 , further comprising: 
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determining, by the SIM device, that the protected application is executed in the 
trusted execution environment p l otform before exchanging the unencrypted data. 

Response to Arguments 

5. Applicant's argument filed 28 January 2009 have been fully considered and they 
are persuasive (See allowable subject matter below) 

Allowable Subject Matter 

6. Claims 1 , 3-6, 8-1 3, 1 5-25 and 29 are allowed. 

Contact Information 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to APRIL Y. SHAN whose telephone number is (571)270- 
1014. The examiner can normally be reached on Monday - Friday, 8:00 a.m. - 5:00 
p.m., EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Y. Vu can be reached on (571) 272-3859. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 



Application/Control Number: 10/715,970 Page 10 

Art Unit: 2435 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/April Y Shan/ 
Examiner, Art Unit 2435 

/Kimyen Vu/ 

Supervisory Patent Examiner, Art Unit 2435 



